This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e384e9-0e7c-44d1-9ce5-ba75f475fc3e/1/fnogtIaCHWJ702CV56Ba-fqhUpw.mft
File: fnogtIaCHWJ702CV56Ba-fqhUpw.mft (raw, json)
Hash identifier: 60z5uD0y/wN5zxdshwbmmoi4pwXU9Cq2K1CBoybmWrA=
Subject key identifier: 8F:0F:60:BC:34:D9:3D:25:AD:1C:74:DF:72:C0:80:77:5E:B8:8C:B7
Authority key identifier: 7E:7A:20:B4:86:82:1D:62:7B:D3:60:95:E7:A0:5A:F9:FA:A1:52:9C
Certificate issuer: /CN=7e7a20b486821d627bd36095e7a05af9faa1529c
Certificate serial: 019C424682761F2CC94D362A729249EFDA5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fnogtIaCHWJ702CV56Ba-fqhUpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e384e9-0e7c-44d1-9ce5-ba75f475fc3e/1/fnogtIaCHWJ702CV56Ba-fqhUpw.mft
Manifest number: 08BC
Signing time: Mon 09 Feb 2026 12:00:42 +0000
Manifest this update: Mon 09 Feb 2026 12:00:42 +0000
Manifest next update: Tue 10 Feb 2026 12:00:42 +0000
Files and hashes: 1: fnogtIaCHWJ702CV56Ba-fqhUpw.crl (hash: FCXVAtQDvf5fcvXY1a91MCXU4gExThfFiPzPYPTO+wc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e384e9-0e7c-44d1-9ce5-ba75f475fc3e/1/fnogtIaCHWJ702CV56Ba-fqhUpw.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/e384e9-0e7c-44d1-9ce5-ba75f475fc3e/1/fnogtIaCHWJ702CV56Ba-fqhUpw.mft
rsync://rpki.ripe.net/repository/DEFAULT/fnogtIaCHWJ702CV56Ba-fqhUpw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 12:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:46:82:76:1f:2c:c9:4d:36:2a:72:92:49:ef:da:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e7a20b486821d627bd36095e7a05af9faa1529c
Validity
Not Before: Feb 9 12:00:42 2026 GMT
Not After : Feb 10 12:00:42 2026 GMT
Subject: CN=8f0f60bc34d93d25ad1c74df72c080775eb88cb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:34:d7:ee:13:5e:7f:0c:6d:08:28:37:5e:8e:
18:42:db:97:96:3a:91:f3:10:d7:d2:c2:c5:2c:fd:
6b:5c:9e:7d:c0:bd:b9:48:46:a3:2c:a8:0b:bc:97:
a0:5a:22:7d:78:62:67:b2:ad:35:3b:0e:6b:99:8d:
36:77:ca:99:50:2d:3e:ea:ee:8e:ef:5e:c1:04:4a:
4c:b1:4a:7c:96:a8:62:f5:9f:cf:28:49:dd:ea:e3:
af:ab:2b:b7:20:a8:48:49:c8:b6:dd:e1:d0:d5:9f:
13:52:41:c7:f5:77:db:58:eb:2d:da:36:44:5c:e5:
b2:42:39:50:31:c1:83:6f:5c:b9:30:19:17:52:25:
ce:87:ac:31:eb:77:7b:a4:ed:da:27:ab:7c:94:eb:
db:2c:8e:83:b2:c5:1d:6e:ff:27:9f:22:88:de:38:
48:be:dd:35:fc:b3:1a:dc:35:0c:93:99:48:25:91:
99:d8:55:36:30:89:1f:78:e5:81:d3:ce:e7:4f:7e:
86:73:de:43:88:f6:53:d0:c9:c5:95:a3:01:11:e2:
3d:c7:df:1e:4c:eb:67:9b:8e:61:d3:0d:6f:01:00:
c8:1e:b6:18:0a:26:49:95:f3:f5:2f:f5:c8:0f:da:
3f:70:f8:18:e5:98:d3:3a:92:0e:33:93:a9:47:4f:
c6:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:0F:60:BC:34:D9:3D:25:AD:1C:74:DF:72:C0:80:77:5E:B8:8C:B7
X509v3 Authority Key Identifier:
keyid:7E:7A:20:B4:86:82:1D:62:7B:D3:60:95:E7:A0:5A:F9:FA:A1:52:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fnogtIaCHWJ702CV56Ba-fqhUpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e384e9-0e7c-44d1-9ce5-ba75f475fc3e/1/fnogtIaCHWJ702CV56Ba-fqhUpw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e384e9-0e7c-44d1-9ce5-ba75f475fc3e/1/fnogtIaCHWJ702CV56Ba-fqhUpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:65:ce:20:83:08:af:fa:c1:16:4e:f5:50:b6:c2:79:bd:55:
44:4a:70:7a:e2:00:1a:e4:89:ed:46:8e:5d:52:92:e8:89:ab:
a5:11:64:17:3b:82:f4:72:ae:d5:df:3a:75:48:27:32:15:2f:
fa:a5:60:88:c7:60:0e:18:99:b8:12:83:9b:57:2d:de:81:3a:
bb:09:73:1a:54:0c:2f:ed:9d:8b:bf:57:80:36:b9:a5:c2:a4:
ca:33:40:cb:25:5c:89:3c:b7:be:bf:22:59:f0:c4:5e:ea:1f:
e8:e3:0a:2f:23:57:a0:4b:fc:f6:9b:68:e8:43:72:c3:ef:3b:
f6:bd:75:3f:7a:9b:62:cb:68:c8:31:9f:f8:55:ff:7d:aa:f7:
12:65:85:e3:e1:5b:5e:bb:a6:db:52:d1:72:08:96:2c:ce:ce:
fb:1f:93:3c:df:15:e6:9f:21:3e:7e:3f:92:de:e6:44:c0:05:
76:76:fe:53:d8:b7:00:43:db:d1:13:de:0d:d1:2d:26:64:33:
c8:14:e7:dd:99:3b:0b:a4:0e:d6:92:7c:b1:03:ab:ef:01:3a:
e9:6a:57:fc:56:14:60:da:ad:b7:b5:3d:a1:7b:c8:b8:c3:a3:
8b:e0:0e:44:9a:18:4f:06:7f:78:db:05:c3:65:fd:c9:7c:ed:
3a:b2:62:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 17:00:39 2026 by rpki-client